$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft File: 02A914400077F3E213C8972280DBD775A6B4C27C.mft (raw, json) Hash identifier: g/bIisgedZo4pyniC4W+4VnVMetKa8vlyZAHfDUPiQ8= Subject key identifier: 73:56:5E:F2:43:A3:71:35:60:84:81:4F:89:54:62:48:B2:3A:DE:FD Authority key identifier: 02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C Certificate issuer: /CN=02A914400077F3E213C8972280DBD775A6B4C27C Certificate serial: 7E7ED3F13434B3B5A7C156F43E0D9899A1F0944A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 23:06:41 +0000 Manifest this update: Wed 02 Sep 2026 23:01:41 +0000 Manifest next update: Fri 04 Sep 2026 01:24:41 +0000 Files and hashes: 1: 02A914400077F3E213C8972280DBD775A6B4C27C.crl (hash: GMx40QNyhVKztqUc6eRg62LgPbCjCBK/83XXGwZw0ho=) 2: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: 7K61pTbrZ/wXrVu+ND+CKuJN541gJOWkRBEe8DSD5VY=) 3: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: MqhWF/9kEJruTy9GHUvbvPqeSAr4kmVz23GSZ1AI124=) 4: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: GtvHkVY9/W43sI4HiI73HEw8h6eq1YXH6SXHhFSgbQc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:7e:d3:f1:34:34:b3:b5:a7:c1:56:f4:3e:0d:98:99:a1:f0:94:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02A914400077F3E213C8972280DBD775A6B4C27C Validity Not Before: Sep 2 23:01:41 2026 GMT Not After : Sep 4 01:24:41 2026 GMT Subject: CN=73565EF243A371356084814F89546248B23ADEFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:26:72:e5:3c:32:63:17:cc:4a:ac:61:ab:35: 2f:df:49:14:37:f0:42:8e:0d:3d:48:4a:30:be:57: 7f:f0:ca:4b:8c:87:8d:f8:64:3d:d9:4f:9e:e4:35: e4:20:91:54:57:fc:e0:8f:b0:67:b0:0b:e2:0e:0e: bc:b4:ad:02:d6:52:c4:1f:88:f2:93:1c:fa:49:ff: 73:c2:28:92:27:81:62:da:89:63:2a:c7:b7:cc:1d: 6d:70:b1:65:3b:92:42:9c:fc:49:b0:b8:69:ca:bd: be:1d:06:b9:48:7e:09:47:05:9e:fd:41:14:23:6a: 2d:94:17:7e:09:11:7c:a1:08:ac:80:a6:e4:a6:1e: d0:10:f7:32:0c:9c:bb:96:b2:b9:56:ff:88:e3:9c: 47:69:b4:64:f8:20:11:52:a1:5b:9b:59:72:b1:1b: 46:e0:77:09:e9:c8:6b:99:4b:2b:9a:df:8d:11:0c: d5:08:d3:79:b2:bc:32:77:d0:5f:c5:7c:82:0c:4e: 42:70:0a:0d:e1:0a:33:31:f1:13:b8:a6:5e:5c:94: 7c:96:5e:21:0d:d5:2d:13:f1:ce:c3:d0:d0:66:88: 56:85:fb:5c:9b:42:7c:62:08:ae:70:54:2c:22:3b: b8:49:b3:a7:4f:5d:18:75:91:1e:f5:09:85:b0:b2: d4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:56:5E:F2:43:A3:71:35:60:84:81:4F:89:54:62:48:B2:3A:DE:FD X509v3 Authority Key Identifier: keyid:02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c0:a1:f3:4b:d5:77:20:23:53:c6:26:44:51:c8:c6:8f:f1: 3f:cf:cf:b6:5e:da:0e:c7:02:26:1b:0e:b8:25:dc:2f:14:62: f3:cf:dc:f3:22:37:bf:fb:12:60:15:19:45:53:b0:3a:ab:13: f2:96:71:b5:2f:85:f2:4d:e1:c5:0a:2a:5e:fb:68:01:8b:81: 86:e0:12:df:42:f1:4b:c8:69:7b:93:3f:b3:fb:cf:c5:d9:c6: 8c:a0:8c:4a:a0:3d:89:7f:3f:7f:10:42:7e:7c:80:ce:24:8e: ea:a5:72:8c:59:89:67:3a:79:8d:a4:7c:24:b3:94:50:8b:90: 8d:cc:82:26:17:99:a9:e4:24:b9:c1:c3:9e:09:80:00:05:25: 08:c7:a2:59:a8:9b:2a:12:fe:b0:8f:33:0d:5d:8a:29:83:88: ca:3d:b4:f6:ff:6f:dc:0a:92:e8:3f:2a:e0:21:72:78:7e:97: 16:48:a7:f9:54:7c:ac:35:05:94:c1:57:cf:65:a1:08:8e:6c: a2:03:81:35:10:12:d2:65:03:ea:a7:fa:79:b4:88:8a:61:0d: 9c:90:33:1d:d8:c2:fe:05:a5:b2:d6:91:c1:3e:3b:aa:7b:56: 13:e4:ed:15:5a:2c:08:db:ea:03:13:d6:3b:0d:f1:57:a4:45: 55:85:e7:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfn7T8TQ0s7WnwVb0Pg2YmaHwlEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJBOTE0NDAwMDc3RjNFMjEzQzg5NzIyODBEQkQ3NzVB NkI0QzI3QzAeFw0yNjA5MDIyMzAxNDFaFw0yNjA5MDQwMTI0NDFaMDMxMTAvBgNV BAMTKDczNTY1RUYyNDNBMzcxMzU2MDg0ODE0Rjg5NTQ2MjQ4QjIzQURFRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJnLlPDJjF8xKrGGrNS/fSRQ3 8EKODT1ISjC+V3/wykuMh434ZD3ZT57kNeQgkVRX/OCPsGewC+IODry0rQLWUsQf iPKTHPpJ/3PCKJIngWLaiWMqx7fMHW1wsWU7kkKc/EmwuGnKvb4dBrlIfglHBZ79 QRQjai2UF34JEXyhCKyApuSmHtAQ9zIMnLuWsrlW/4jjnEdptGT4IBFSoVubWXKx G0bgdwnpyGuZSyua340RDNUI03myvDJ30F/FfIIMTkJwCg3hCjMx8RO4pl5clHyW XiEN1S0T8c7D0NBmiFaF+1ybQnxiCK5wVCwiO7hJs6dPXRh1kR71CYWwstQVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc1Ze8kOjcTVghIFPiVRiSLI63v0wHwYDVR0j BBgwFoAUAqkUQAB38+ITyJcigNvXdaa0wnwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQzMzM2ZjgtZTU0Ni00NjJjLTg0MTAtYjc3MzJiNmM4MDE1LzAvMDJBOTE0NDAw MDc3RjNFMjEzQzg5NzIyODBEQkQ3NzVBNkI0QzI3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMkE5MTQ0MDAwNzdGM0UyMTNDODk3MjI4MERCRDc3NUE2QjRD MjdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQzMzM2ZjgtZTU0Ni00NjJjLTg0 MTAtYjc3MzJiNmM4MDE1LzAvMDJBOTE0NDAwMDc3RjNFMjEzQzg5NzIyODBEQkQ3 NzVBNkI0QzI3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvAofNL1XcgI1PGJkRRyMaP8T/Pz7Ze2g7H AiYbDrgl3C8UYvPP3PMiN7/7EmAVGUVTsDqrE/KWcbUvhfJN4cUKKl77aAGLgYbg Et9C8UvIaXuTP7P7z8XZxoygjEqgPYl/P38QQn58gM4kjuqlcoxZiWc6eY2kfCSz lFCLkI3MgiYXmankJLnBw54JgAAFJQjHolmomyoS/rCPMw1diimDiMo9tPb/b9wK kug/KuAhcnh+lxZIp/lUfKw1BZTBV89loQiObKIDgTUQEtJlA+qn+nm0iIphDZyQ Mx3Ywv4FpbLWkcE+O6p7VhPk7RVaLAjb6gMT1jsN8VekRVWF58M= -----END CERTIFICATE-----Generated at Thu Sep 3 05:56:52 2026 by rpki-client